个人信息刑法保护之界限研究

Research on Criminal Protection Boundaries on Personal Information

在《网络安全法》加大侵犯个人信息违法行为处罚力度、两高最新司法解释进一步扩充刑法第253条之一构成要件的背景下,行政法与刑法的界限问题、刑法自身的边界问题变得非常突出,直接影响到罪与非罪的认定。个人信息的刑法保护不仅遭遇行政处罚和刑罚的界限分歧,还遭遇第253条之一构成要件要素自身的界限分歧,主要包括:"公民个人信息"范围的扩大使其边界范围模糊不清;"国家有关规定"的虚置化与冲突性导致其难以发挥罪状的限定作用;"人肉搜索"型侵害行为的范围具有不确定性;"非法收集"型侵害行为的入罪标准不具有实际可操作性。个人信息刑法保护问题本身跨越了宪法、行政法与刑法等法律部门的界限,其界限分歧问题实际上是刑法与宪法、刑法与行政法的界限问题,建立个人信息保护的宪法和行政法秩序、全面搭建个人信息保护的伦理秩序和规则体系可解决该问题。

The supervision on illegal activities for personal information has been strengthened by Cybe-Safety Act and the constitutive elements in the one of Articles 253, and Criminal Law have been expanded by the new judicial Interpretation. Under such background, the problem of boundaries between administrative law and criminal law has become very prominent, directly affecting the determination of crime or non-crime. The criminal protection on personal information falls into bifurcation for boundaries between administrative law and criminal law as well as the one of Article 253, mainly including： the boundaries of ＂citizens＇ personal information＂ is ambiguous because of its range expanded, ＂the national relevant stipulations＂ has difficulty to play a role of restrictive function, the range of ＂human flesh search＂ is uncertain, the standard of criminalization for ＂illegal gathering personal information＂ has no practical operability. The issues of criminal protection on personal information integrate the constitution, administrative law and criminal law. The divergences in fact result from the ambiguous boundaries of criminal law and the constitution as well as the criminal law and administrative law. The problem can be solved by establishing constitutive ethical order and administrative legal regulations.